Privacy policy
Last updated October 7, 2026
Mint POS Staff Commissions is a Shopify app made by Mint Labs ("we", "us"). It helps stores that sell in person with Shopify POS pay their staff sales commission: it records which staff member made each POS sale, the commission on it, clawbacks when items are returned, adjustments and the payouts the merchant marks as paid. This policy explains what the app handles, why, and when it's deleted. For personal data we hold on a merchant's behalf we act as a service provider (processor) to the merchant, who is the controller.
Summary
- The app holds no data about the store's customers (buyers). It reads order numbers, dates, payment status, how each order was paid (payment provider, test or manual payment, amount — only to tell real payments from test orders; not stored), sales channel, the POS location and the order lines' amounts; it never requests or stores a customer's name, email, phone or address.
- It holds the merchant's staff members as the app knows them: their Shopify staff ID and a display name typed by the merchant or by the staff member on the POS tile.
- It never moves money. Payouts are records the merchant creates after paying staff outside the app (for example through payroll).
Information from Shopify
| What | Why |
|---|---|
| Orders (read_orders): order ID and number, date, payment and cancellation status, test flag, sales channel, POS location, line titles, quantities, prices, discounts allocated to lines and line taxes | To work out each credited line's commission and to claw it back when items are returned, refunded or the order is cancelled. |
| Products (read_products): product type and collections of the products sold; product types and collections in the rules page | To apply commission rules by product, collection or product type. |
| Locations (read_locations): location names | To show where a POS sale was made and to apply location rules. |
| Store details: name, currency, time zone, domain | Amounts use the store currency; pay periods and months follow the store's time zone; statements show the store's name. |
Information from the POS extension
While Shopify POS is open on a device with the extension, it sends the app, for each completed sale, return or exchange: the order ID, the time, the POS staff ID of the staff member pinned in POS (and of anyone a line or the cart was credited to), the POS user and location IDs, and the variants and quantities of the items. It never sends anything about the customer. When the device is offline these reports are kept on the device until they can be sent. The tile also shows the pinned staff member their own sales and commission for the pay period, the team list and, if the store switches it on, the leaderboard.
Information about staff members (held for the merchant)
| What | Why |
|---|---|
| Shopify staff ID, display name, status, whether they appear on the leaderboard, first and last POS sale date | To credit sales to the right person and show their commission, balance and statements. |
| Commission records: credited order lines (order number, item, amounts), clawbacks, tier bonuses, adjustments with the merchant's notes, payouts | The commission ledger, payouts and statements. |
| POS reports (order ID, staff IDs, variants, quantities, time, location) | To decide who each line is credited to. Kept 400 days. |
Where data is kept
On Cloudflare (Workers, D1 database, Queues), encrypted in transit and at rest. Our sub-processors are Cloudflare and Shopify.
Retention and deletion
- While the app is installed, commission records are kept so balances and statements stay complete.
- A merchant can remove a staff member's name at any time (it becomes "Staff ·1234", they leave the leaderboard and adjustment notes are cleared; amounts, dates and order numbers stay as the store's accounting records).
- POS sales nobody was credited for are forgotten after 61 days.
- On uninstall the access tokens are deleted at once. Shopify then sends a shop redaction request 48 hours later and we delete everything we hold for the store.
- Customer data requests and customer redaction requests from Shopify are acknowledged; the app holds no customer data to return or erase.
Cookies
The Shopify admin part of the app and the POS extension use Shopify's session tokens, not cookies. The public website sets no cookies.
Your rights
Staff members should contact the store they work for; the store can see, correct, export (statements, CSV) or remove their details in the app. Merchants can contact us at support@stickermint.com.
Contact
Mint Labs: support@stickermint.com